Questions tagged [ssl]

Secure Sockets Layer (SSL) is a cryptographic protocols that provide communication security over the Internet.

Filter by
Sorted by
Tagged with
0
votes
1answer
1k views

`Encrypt Connection` causes an invalid certificate error even though server-side encryption is forced

I have a SQL Server set up to force encrypted connections from all client. It has a standard SSL certificate, using Let's Encrypt as the CA. Browsing to the server via a web browser verifies that the ...
1
vote
1answer
96 views

Using a real certificate with rethinkdb cert chain bundle

I know the rethinkdb guide uses a self signed cert as an example. If I wanted to use a real certificate that I purchased, how can I add the bundle to the server conf? I add the certificate I purchased ...
3
votes
3answers
1k views

MySQL SSL replication error 2026

I've been searching and testing for hours and still can't figure this out. MySQL version 5.7.23 on both slave and master. Replication over SSL is failing with the following error message: Slave I/...
1
vote
1answer
32 views

Why MongoDB not running SSL?

I need to run MongoDB with SSL, the version that is currently installed is 3.4.16 without SSL. Can I download 3.4.16 with SSL and just stop the service copy the Bin files across and then start up the ...
1
vote
1answer
1k views

Postgresql install adding openssl

I install postgresql in my ubuntu Server 18.04 LTS, and I want it support OpenSSL. I do the lengthy way with PostgreSQL source code installation, where I can select the openssl feature: ./...
2
votes
0answers
2k views

Configuration of TCP/IP with SSL and TLS for Oracle

I am trying to configure the connections to my Oracle database with tcp / ip using ssl I have been guided by the procedure of the site https://oracle-base.com/articles/misc/configure-tcpip-with-ssl-...
1
vote
1answer
806 views

SQL Server 2012 not loading its self-generated SSL certificate

I have a requirement to remove the SSL certificate that is being used by a SQL Server 2012 SP4 database instance for data in transit encryption. The client wants the SQL Server to load its self-...
3
votes
1answer
5k views

Is it impossible to force MariaDB users to SSL?

First of all, my english is really bad, so sorry for my english mistakes. I have a MariaDB 10.2.15. I installed SSL, and its working fine, but I cant force use SSL to users. my.cnf: [mysqld] ssl ssl-...
5
votes
2answers
12k views

MongoDB SSL peer certificate validation failed: unable to get issuer certificate

I have enabled SSL on MongoDB with optional SSL connection: preferred. I have used lets encrypt in order to obtain SSL certificates. SSLs works as expected and in mongod.log file I can see that: ...
0
votes
1answer
160 views

SSL errors with Couchdb on Ubuntu 14.04

I am beginning to set up CouchDB on an Ubuntu 14.04 Server (yes, it expires next year) and I'm having troubles setting up SSL connections. For the moment, I don't have any CA signed certs for it, so I'...
2
votes
1answer
1k views

MongoDB gives certificate not trusted while openSSL says keys is OK

I have used let's encrypt to generate SSL certification. All the private key, chain and certificate is generated by `let's encrypt. Now to use it in MongoDB I first merged privkey.pem and cert.pem ...
1
vote
1answer
192 views

How to stop MySQL recreating SSL files on restart

We're using MySQL 5.7.22. Each time I restart MySQL it creates a set of SSL files ( ca-key.pem etc) in the datadir. The problem is that I already have these files on the server, in /etc/mysql/ssl. ...
2
votes
1answer
4k views

PostgreSQL - SSL connection without providing the root-ca certificate?

I set the following parameters to enable SSL on my PostgreSQL server: ssl = True ssl_ca_file = 'path-to-root-ca' ssl_cert_file = 'path-to-server-crt' ssl_key_file = 'path-to-server-key' For my ...
0
votes
1answer
566 views

SSLServerHasCertificateAuthority is false but the certificate is signed by a trusted CA

I am enabling TLS/SSL encryption on a remote MongoDB instance (running on Windows Server 2012 R2). On the instance's server, devserver.external, I have created an SSL certificate. The CN on the ...
0
votes
1answer
703 views

How do I manage SSL credentials for multiple Postgres connections?

We're setting up Redash and need to connect to multiple Data Sources that are Postgres databases that require SSL connections. I have a postgres.key and postgres.crt file from each database. Redash is ...
10
votes
3answers
9k views

MySQL SSL error: Unable to get private key

Getting an error while trying to enable encryption: [ERROR] SSL error: Unable to get private key from '/etc/mysql/ssl/nginx.key' [Warning] Failed to set up SSL because of the following SSL library ...
4
votes
1answer
6k views

How to enable force ssl on AWS Aurora Postgres?

In AWS's direct postgres offering RDS Postgres, you can require SSL by setting the parameter group item rds.force_ssl to 1. This is as per the RDS postgres documentation: https://docs.aws.amazon.com/...
4
votes
3answers
3k views

How do I test if MySQL "require secure transport" is working?

I activated the checkbox named "require secure transport" in the options file, found in the MySQL Workbench. How do I know if MySQL "require secure transport" is working? Should I use command line at ...
10
votes
5answers
45k views

mysql workbench: ssl is required but the server doesn't support it

I'm having trouble finding answers with various Internet and Google searches for MySQL Workbench issue I'm experiencing. I have not found any answers on how to make this work again. Here's the MySQL ...
3
votes
2answers
3k views

Update expiring Mongo cluster SSL certificate

I have a multi-node mongo cluster using SSL requireSSL and the certificates are going to expire. Is there a zero-downtime method to update the certs? I know the easiest way would be to stop all nodes, ...
0
votes
1answer
635 views

Oracle JDBC TLS connection fails (handshake_failure) after OS upgrade

I have an Oracle Database 12.1 server running on Oracle Linux 6. Secure (TLS) connections were working fine until I decided to update the underlying operating system (yum update) and reboot the ...
0
votes
1answer
98 views

Disable CertificateRequest in ServerHello in MySQL/MariaDB

I configured SSL (not mutual SSL) in MySQL. I created a user like this. CREATE USER 'username'@'%' IDENTIFIED BY 'passowrd'; GRANT ALL ON db_name.* TO 'username'@'%' REQUIRE SSL; But, in ...
2
votes
0answers
192 views

Postgresql: Enable TLS for localhost connections

What are the advantages and disadvantages to enable TLS to a Postgresql that only gets connections on localhost?
0
votes
1answer
2k views

Configure wallet location in sqlnet.ora and listener.ora

I have a host containing multiple DBs and the connection to the DBs need to be SSL enabled. Since each DB has a unique wallet, I specify the wallet location in sqlnet.ora as: WALLET_LOCATION=(SOURCE=(...
1
vote
0answers
257 views

Mongoimport with SSL

I want to dump a database in a remote server www.myweb.io with ssl. The mongo version is 2.6.12. It seems that I have to use mongoimport. I am looking at /etc/nginx/sites-enabled/myweb.io: server { ...
0
votes
1answer
437 views

Rule of thumb on what changes require a database reboot

I am working on enabling SSL for database listeners. As a part of it, I have to modify the sqlnet.ora and listener.ora files. Does this require a database bouncing to take effect? Is there a general ...
0
votes
2answers
966 views

MongoDB SSL Enabling/Configuration

I have created self signed Certificated by using openssl and have mongodb.pem(mongodb.key + mongodb.cert) file generated from openssl. Also i have my mongodb-ssl.conf file as follows storage: ...
1
vote
2answers
2k views

SQL Server Self Signed Cert - no private key?

I recently turn on SSL encryption using SQL server self-signed cert then I start to ponder more about 1) encryption algorithm, authentication method It seems that the encryption/hashing algorithm ...
1
vote
1answer
3k views

Mutual authentication via SSL Oracle 11g

I configure mutual authentication via SSL between client (Windows 7) and server (Windows Server 2008 R2). I create wallet via Oracle Wallet Manager (OWM) both on client and server, then I create ...
1
vote
2answers
2k views

Pulling data on SSL expiration from SQL server

I am trying to figure this out and seems to be out of thoughts and need your inputs to help me figure out on this. We have implemented SSL across our 200+ servers, SQL2012 & 2014. These cert are ...
3
votes
1answer
689 views

How can I setup replication with the DNS name instead of the Server Name

We are using SSL certificates from a public CA on each SQL Server in our (push) transactional replication topology, and wish to have the EncryptionLevel = 2 for our Distributor Agents. Currently ...
2
votes
2answers
1k views

Does MySQL or MariaDB have a master option to strictly require TLS for ALL connections, no matter what?

When setting up new MySQL or MariaDB servers, I am much more concerned about security than performance. The MySQL and MariaDB documentation use the words "allow" and "permit" around all the SSL ...
2
votes
1answer
1k views

PostgreSQL 10 - secure remote logical replication (SSH?)

I am exploring Postgresql for a new project, and the upcoming logical replication feature in version 10 interests me. I would like to use it to have a remote server automatically hold an up-to-date ...
1
vote
1answer
911 views

MySQL / MariaDB SSL Connection without verify CA

I need to cryptography a connection between client and server. This is config in my server MariaDB [(none)]> show variables like "%ssl%"; +---------------------+----------------------------+ | ...
3
votes
1answer
1k views

Linked Server Setup Error - SSL Provider: The client and server cannot communicate, because

I am trying to setup a linked server and ending up with the following error. Error: SSL Provider: The client and server cannot communicate, because they do not possess a common algorithm. Environment:...
3
votes
1answer
730 views

MySQL 5.7 enforce SSL

I'm using MySQL 5.7 and I want to set up SSL to force the client to use a cert. This cert is a self-signed cert that I generate. I have the cert for both server and client being: - CA - cert - key ...
2
votes
2answers
44k views

Login Error while connecting SQL Database through Power BI?

I get the error message displayed in Power BI Online when using an enterprise gateway connected to an on-premise SQL Server Unable to connect: We encountered an error while trying to connect. ...
1
vote
0answers
66 views

Does mongodb support Entrust based ssl

I am getting SSL: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate" error at mongod console while connecting using ssl. and " exception={com.mongodb.MongoSocketOpenException:...
1
vote
0answers
1k views

MongoError: self signed certificate in certificate chain

I am trying to connect my node server with mongodb with ssl options enabled. mongod.conf storage: dbPath: /var/lib/mongodb journal: enabled: true # where to write logging data. systemLog: ...
1
vote
1answer
2k views

How can I perform a mongoimport to a host that requires an SSL Certificate?

I am trying to load some sample JSON data into a MongoDB database (hosted on IBM Bluemix). The connection requires SSL, and a SSL Certificate has been provided, but I keep getting an error when I ...
0
votes
1answer
2k views

SQL Server SSL Connection - Performance

I know there are plenty of posts here regarding SQL Server and SSL encrypted connections, however I didn't find any that touched on this particular subject. In this article, it mentions that ...
0
votes
1answer
430 views

SSL connection to MySQL suddenly not working anymore [closed]

SSL connections where running smoothly til last week, now I can't connect anymore. I have a MySQL installation on a virtual machine running Ubuntu. The machine is hosted on a Windows 2012 R2 Server. ...
1
vote
0answers
36 views

How do I log non-SSL connections to MySQL 5.5?

I've recently converted my applications to connect to MySQL 5.5 using SSL. However, I'm afraid that I've missed something, so I'm also allowing non-SSL connections to the server. How can I log ...
1
vote
1answer
473 views

Configure SQL Server to encrypt data traffic in both directions

How can I ensure that SQL Server data traffic is encrypted over the wire both from server to client and from client to server? I have set Force Encryption to Yes and that alone seems to hide query ...
3
votes
0answers
155 views

Securing a Cassandra Cluster

We've managed to set up a Cassandra 2.2.6 cluster of two physical nodes (nodetool sees both of them, so I'm quite certain the cluster is indeed active). My steps to create the cluster were (this ...
3
votes
1answer
12k views

MongoDB error: self signed certificate in certificate chain

I'm setting up for test a dockerized MongoDB which uses SSL. Everything goes fine with configuration, but when I'm trying to connect I get the following error: SSL peer certificate validation failed: ...
3
votes
0answers
149 views

SSL for security - Percona MySQL

I have been told to implement SSL in my Master-Master MySQL instances by my security team to have secure traffic only to be received at the database end. I have never implemented SSL in a database ...
4
votes
1answer
5k views

pgbouncer and ssl connection

I have three Servers, two of whom are running postgres 9.5.3 and the third runs pgbouncer 1.7.2. i can access one of the two postgresql instance through pgbouncer and it all works perfect. the other ...
1
vote
1answer
2k views

Setup SQL Server SSL client certificate

I have created a certificate authority on my Linux server using OpenSSL. I have added that certificate authority to the Windows Trusted Root Certificate Authorities, which it now recognises. What do ...
6
votes
3answers
6k views

SSL connection to AWS RDS Postgresql instance from windows client

I am trying to connect to a PG instance hosted on AWS RDS using a secure SSL connection. Where do I store the public key on windows so that it is automatically applied to the connection? Please note ...